CVE-2016-2182 in OpenSSL
Summary
The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/29/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 91902 | OpenSSL BN_bn2dec memory corruption | 119 | Not defined | Official fix | CVE-2016-2182 |
| 90937 | OpenSSL bn_print.c BN_bn2dec out-of-bounds write | 787 | Not defined | Official fix | CVE-2016-2182 |